CVE-2019-12181

Related Files

Serv-U FTP Server prepareinstallation Privilege Escalation

Posted Jul 2, 2019

Authored by Brendan Coles, Guy Levin | Site metasploit.com

This Metasploit module attempts to gain root privileges on systems running Serv-U FTP Server versions prior to 15.1.7. The Serv-U executable is setuid root, and uses ARGV[0] in a call to system(), without validation, when invoked with the -prepareinstallation flag, resulting in command execution with root privileges. This module has been tested successfully on Serv-U FTP Server version 15.1.6 (x64) on Debian 9.6 (x64).

tags | exploit, root

systems | linux, debian

advisories | CVE-2019-12181

SHA-256 | 741d912f9d81ee69caacd00759e742b27f2fbda4aa232a5b4199ceb2b7e3a311

Download | Favorite | View

Serv-U FTP Server 15.1.6 Privilege Escalation

Posted Jun 18, 2019

Authored by Guy Levin

Serv-U FTP Server version 15.1.6 suffers from a local privilege escalation vulnerability.

tags | exploit, local

advisories | CVE-2019-12181

SHA-256 | 25bff5ba2be3edf9ed986bd39f8d9bd1ae0e31fb8515abafc5e1c68e32374b5b

Download | Favorite | View